User Records

Hi All,
I want to see all the records of the users who logged into the hyperion Planning and make changes in the dataform.I want to know the time and date of changes.I tried something called Audit in Shared services but am confused.I need help.
Any help....?
Thanks

Hi,
First of all what version are you on.
I am not sure if you will be able to find out in that much detail, you can find out what data has been changed but not if a user changes a dropdown.
Have a look at the auditing options available in planning > http://download.oracle.com/docs/cd/E12825_01/epm.111/hp_admin/rep_aud.html
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

Dynamic rooting (User Record) setting is not working in Nakisa OrgChart SP3

Dear All
The Dynamic rooting setting is not working in the Nakisa OrgChart SP3.
It is giving an error message - "Cannot find the root of your orgchart. The orgchart box may have been deleted or incorrectly specified, or no valid org structure can be found for the selected effective date. Please change the root of the chart or select another effective date."
We followed the same steps as given in the Admin guide of SP3 (P.no. 109 - shown below)
In Orgchart --> General Settings:
* Select the Org chart root value source.
User Record: Retrieves the record specified in the next step from the employee data element.
*Do one of the following to define the org chart root:
If User Record was selected in the previous step, select the field containing the ID of the required organizational object in the employee data element from the User record field drop-down list. For example, if you wish to root the org chart at the org unit of the logged-in user, select the field containing the org unit ID. Hence, we have selected the Org unit ID.
Note:
We had enabled single sign-on with logon tickets
Retained the standard settings in Security Settings --> Employee Source
Had provided full authorization to the roles
If we use the "OrgChart Root" option available in 'Orgchart root value source', the org structure gets displayed correctly from the root object defined.
As this is an standard functionality, Kindly guide us in resolving the issue.
Regards
Ravindra

Ravindra.
You don't have to and shouldn't always include the username and password parameters for the SAP Connection string. When you omit them it will use the user's login credentials.
Remember though that:
The SAPRoleMappingConnection will need them included in order to get the details for the user in the first place.
Without the username and password specified in a connection string you can't click the option to test the connection and result in a successful connection. Remember unable to connect does not necessarily equate to wrongly configured.
I've filtered the log file for errors and the following entries were flagged up:
26 Jun 2012 10:00:06 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 13:13:52 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 13:43:49 ERROR com.nakisa.Logger - java.lang.reflect.InvocationTargetException
26 Jun 2012 13:55:09 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 14:32:03 ERROR com.nakisa.Logger - com.nakisa.framework.utility.Files : deleteFile : java.io.IOException: Unable to delete file: E:\usr\sap\D15\J00\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__THY_SAP_Live_RFC_01\AppResources\attr.txt
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : The dataelement ( SAPPositionVacancyDataElement ) is not defined.
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : while trying to invoke the method com.nakisa.framework.data.Command.getType() of an object loaded from local variable 'p_cmd'
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : The dataelement ( SAPPositionVacancyDataElement ) is not defined.
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : while trying to invoke the method com.nakisa.framework.data.Command.getType() of an object loaded from local variable 'p_cmd'
26 Jun 2012 15:47:44 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
26 Jun 2012 15:47:48 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
26 Jun 2012 15:47:55 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : The dataelement ( SAPPositionVacancyDataElement ) is not defined.
26 Jun 2012 15:47:55 ERROR com.nakisa.Logger - BAPI_SAP_OTFProcessor_LinkedDataElement : while trying to invoke the method com.nakisa.framework.data.Command.getType() of an object loaded from local variable 'p_cmd'
26 Jun 2012 15:47:55 ERROR com.nakisa.Logger - com.nakisa.framework.webelement.charting.data.ChartingData : createNodesFromData : Notes Error: NullPointerException
At the very least it looks like SAPPositionVacancyDataElement is missing and whilst the other errors around it are unfamiliar I wonder if it might be a good first step to see if you can track down the reference to and existence of this data element? That being said it looks like your last test occurred well over an hour after this (so you may have already resolved it) and resulted in nothing but information messages. If that is the case it might be worth "rolling" your log file or manually trimming it to the right time frame when posting it? Otherwise it can be misleading as people could flag up issues you have already resolved.
So assuming you haven't tried Luke's suggestion (which should only take a couple of minutes to do) I think you should go back and do so right away .
Regards,
Stephen.

Error while importing the user Records through SCC7

Hi Basis Gurus,
We are doing the post DB Refresh Activities for a Sandbox .
Refresh is done from D21 to S21.
We are stuckup with an error while importing the user Records(scc7).
The exported user records request from D21 is dumped in the trans directory of S38 and imported in to S21 using TP commands at O/S level. The import is done successfully( RC 4 with warnings).
But now when we run SCC7 (post import activities) in the background the process is getting cancelled right in the begining.
Error Occured in SCC3 log
Table logging disabled in program RSCLXCOP by user SAP*"
R/3 Version is 4.6C OS:AIX5.3
Your suggestions will be highly appreciated.
Regards,
Sitaram

Hey Sitaram,
I looks like you have incorrect parameters of client copy in the S21 system.
You can change the parameters in S21 system,
by executing report RSCLXCOP (via transaction SE38 or SA38) in S21.
Search parameters that related to table logging/sap*
good luck!

Sun IDM 8.1.1P2: Export user records to xls file Functionality Issue

Hi All,
This is my first post in this form, please guide me to right path.
We implemented custom functionality to search user records from AD and LDAP from IDM User console. After searching the records we provided a export functionality to export resultant user records to xls file.
The issue is the number of exported user records to xls file is not same as the number of user records while search.
This functionality is working good in our Development and VALenvironments but not with the Production environment.
I checked the custom jsp file and the calling Rule from all the three environments and they are same.
From VAL and PROD server.log I see the following.
PWC1406: Servlet.service() for servlet jsp threw exception
java.lang.IllegalStateException: PWC3991: getOutputStream() has already been called for this response
But this error message didn't stop VAL to export same number of records to xls file.
# of records serached from PROD is 16809
# of records serached from VAL is 10312
They are constant all the time.
# of records exported to xls from PROD is 168 or 1274 (It is varying, each time I export it shows different number)
# of records exported to xls from VAL is 10312 (Always same as search)
We are on Glassfish V2.1.1P8.
I checked file sizes from VAL and PROD both are same.
It would be great if any one can point me to the right direction where else I have to check for possible cause.
Thanks,
Ravi Mangalagiri

Hi Arjun,
Thanks for responding to my post.
The search is working as expected in all 3 environments DEV,VAL and PROD.
The search and alignment performed by the Rule where as DB connection and Saving to XLS performed by the custom JSP file.
Since search is working fine I don't think any permissions issue with AD or LDAP.
Couple of things I noticed from server.log from all environments
SEVERE|sun-appserver2.1.1|javax.enterprise.system.container.web|_
ThreadID=297;_ThreadName=httpSSLWorkerThread-9084-102;_RequestID=5efa3ecb-0ec9-4695-ab51-8049257b
9d57;|StandardWrapperValve[jsp]: PWC1406: Servlet.service() for servlet jsp threw exception
java.lang.IllegalStateException: PWC3991: getOutputStream() has already been called for this resp
onse
and
WARNING|sun-appserver2.1.1|javax.enterprise.system.stream.err|_ThreadID=78;_ThreadName=Provisioner;_RequestID=531d32b0-6d9a-4
3e-bd74-0bc9478ffdae;|org.xml.sax.SAXParseException: XML document structures must start and end within the same entity.
at org.apache.xerces.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)
This is logging when the custom jsp is executing.
getOutputStream() has already been called for this response.
I am not sure if this is the root cause, since it is logging in DEV and VAL also.
Other things I noticed are.
Yester day I conducted 10 tests and all are taking 6 min 18 sec or 6 min 19 sec or 6 min 22 sec.
Also I noticed that the number of user records exported to xls depends on the transfer rate.
For example,
if the file download transfer rate is 1.50 KB then the user records are between 1200 to 1800 where as the search user records are 16590.
if the file download transfer rate is 800 B then the user records are between 200 to 600 where as the search user records are 16590.
Not sure where to check this time value(attribute) 6 min 18 sec..
Please provide me some info where else I need to check.
Thanks,
Ravi.

Can new cutsom currency fields on User Records be used for SOD Analytics?

We will have new cutsom currency fields on User Records. Can we utilise these new custom fields for dashboard reporting using SOD Analytics?

Hi
Yuo can try to use FOR ALL ENTRIES option.
IF you have:
WERKS BTRTL
Z002 Z001
Z002 Z002
Z003 Z001
Z003 Z002
You should do something like that:
DATA: BEGIN OF <TAB_SEL> OCCURS 1,
       WERKS TYPE WERKS,
       BTRTL TYPE BTRTL,
      END   OF <TAB_SEL>.
WERKS BTRTL
<TAB_SEL>-WERKS = 'Z002'. <TAB_SEL>-BTRTL = 'Z001'.
APPEND <TAB_SEL>.
<TAB_SEL>-WERKS = 'Z002'. <TAB_SEL>-BTRTL = 'Z002'.
APPEND <TAB_SEL>.
<TAB_SEL>-WERKS = 'Z003'. <TAB_SEL>-BTRTL = 'Z001'.
APPEND <TAB_SEL>.
<TAB_SEL>-WERKS = 'Z003'. <TAB_SEL>-BTRTL = 'Z002'.
APPEND <TAB_SEL>.
SELECT * FROM <TABLE> INTO TABLE ITAB
   FOR ALL ENTRIES IN <TAB_SEL>
                   WHERE WERKS = <TAB_SEL>-WERKS
                      AND BTRTL = <TAB_SEL>-BTRTL.
In this case you need to fill correctly the internal table <TAB_SEL> with the all combinations.
Max

Group Membership in User Record

Problem
I am trying to figure out how to add a field for users that lists the groups the user belongs too.
This is for a firewall login situation that expects the AD memberOf attribute for a user.
I would like the field to auto update when a user is added or removed from a group, but I don't think this is possible.
*Current Method*
I am currently trying to modify the apple schema, but am having difficulty because most examples are for an offline or new system. One method that almost worked wiped the entire /etc/openldap/slapd.d/ directory and then did slaptest -v -d 68 -f /etc/openldap/slapd.conf -F /etc/openldap. I tried this, and ldap looses all the stored data(I saved a copy first).
I also tried to edit the apple schema ldiff file directly. I added member to the apple-user MAY ( ... $ member ) section, but that did not give me an allowable field in Work Group Manager under the User tab. This didn't exactly work either, although I did see the addition in the inspector schema{7}. This was rather exciting, but it didn't enable the member field. Member should be a posix attribute... but I could be totally confused at how the objects work.
The end result needs to be a list of groups in a field like Member or memberOf for each user. I can enter the groups in by hand, but would rather not since apple should be able to do this for me(wink*).
*Various Commands*
- launchctl load /System/Library/LaunchDaemons/org.openldap.slapd.plist
- slaptest -v -d 68 -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
- /usr/libexec/slapd -d 99 2> ~/slapdump
Questions
- What is the best way to solve this problem in OSX?
- How can I safely change a schema for the master with a master replica setup?
- Can Work Group Manager update the schema without giving an error?
- Once I have the field, how to keep it up to date with the groups?

You are correct. Each resource has its own Revoke task.
Consider this simple scenario for an individual resource:
1. The user select to Revoke the provisioned account.
2. The revoke process task de-provisions the resource
3. The Revoke process task resets the flag in the Xellerate User record.
4 The Resource status is set to Revoked.
5. The Access Policy Revoke calls the Undo Task for Create user, which is step 1. (This is where I believe the problem starts, since it is already Revoked)
I would like to figure out how to create this process flow:
1. The user selects to Revoke the provisioned account.
2. The Revoke Process Task reset the flag in the Xellerate User record.
3. The Access Policy Revoke calls the Undo Task for Create user (Which would be a different Process Task than step 1)
4 The AP Revoke Process task de-provisions the resource
5. The Resource Status is set to Revoked
6. Process Complete

Multiple values in a user record field and Address Book

Hi
I'm working out a method of importing multiple users into an LDAP directory on OS X 10.4.4, and I've hit an interesting snag.
When you export a user from Workgroup Manager, any fields in the user record that contain multiple values (multiple email addresses, work phone numbers, etc) contain their values separated by commas. For example:
username::::[email protected],[email protected]:::
However, when I view that LDAP entry in a networked Address Book, it only displays the first value, not the second or subsequent values. I've changed the Address Book template to specify multiple emails/phone numbers, but that doesn't do it.
If I create my own import file, and pull it into Workgroup Manager, they import correctly into the user record, so I don't think I'm doing anything wrong on the server side.
Does anyone know how to make Address Book display all the values?
Thanks
Matt

if i'm not remembering read stuff wrong, these fileds have quite alot of limitations. and i think multiple values per field is such a limitation.

Delete a user record from oracle db

Hi,
Can anybody share me a custom workflow which deletes a user record from the oracle db.The user does exist in SUN IDM.
Please help me.
Thanks in advance.

You can use a Trigger and UTL_FILE to write to a file (on the server).
Example:
create or replace trigger test_file
after insert or delete or update on test_case
for each row
declare
v_logfile utl_file.file_type;
begin
v_logfile := utl_file.fopen('\myfiles','test_file.log','a');
if inserting then
     utl_file.put_line(v_logfile,'Inserting to table');
elsif deleting then
     utl_file.put_line(v_logfile,'Deleting to table');
else
     utl_file.put_line(v_logfile,'Updating to table');
end if;
utl_file.fclose(v_logfile);
end test_file;
I want to generate a log file in which i want to dump some useful messages, when anyone does a dml operation on a table, and also, i want to have a switch like YES or NO (may be an environment variable,,) if i switch it to YES the log file should get generated, if NO then, no log file will be generated..
can anyone help, how can you do this task ?
thanks a lot in advance..
srini

Security Agent: Could not get the user record from OpenDirectory

Hi,
Two months ago I had to change my SSD due to a damage at the old one. In the Apple shop they installed OS X Lion with a image from their image-server.
After that the Mac was quite slow in booting. With the old SSD (128 GB) booting takes 25 sec now it takes 75 sec.
I tried different things to solve the problem without result. First I asked in the shop, then I googled the problem all with no real solution.
Today now I searched in the log files. I found the following:
09.02.12 11:03:07.861 SecurityAgent: Could not get the user record from OpenDirectory.
09.02.12 11:03:07.861 SecurityAgent: Will sleep 3 seconds and try again (retryCount = 10)
09.02.12 11:03:34.907 SecurityAgent: Could not get the user record from OpenDirectory.
09.02.12 11:03:34.907 SecurityAgent: Will sleep 3 seconds and try again (retryCount = 1)
09.02.12 11:03:34.907 SecurityAgent: Will sleep 3 seconds and try again (retryCount = 1)
09.02.12 11:03:38.653 WindowServer: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
09.02.12 11:03:58.245 SecurityAgent: User info context values set for andi
09.02.12 11:03:58.246 SecurityAgent: User info context values set for andi
09.02.12 11:03:58.356 SecurityAgent: Login Window login proceeding
09.02.12 11:03:58.356 SecurityAgent: Login Window login proceeding
This operation takes 30 secs during the boot process. Can somebody help me, to solve this problem?
Regards
Andreas
MacBook Pro, Mid 2009
2.66 GHz Intel Core 2 Duo
8GB 1067 MHz DDR3
SAMSUNG SSD 830 Series , 256 GB
OS X 10.7.3

cece2bali wrote: "it seems that your mac tries to connect to a server while booting. This action will erase all your network configuration..."
Where can I go to learn more about this 'erasure' of network configuration if the mac tries to connect to a server while booting?
I get the same error message as the OP. My account is an Admin on the machine. It's configured to automatically log in on boot -- except sometimes it fails. It has a login-item which runs a bash script that makes an https request to a nearby machine. Maybe I should make this script sleep a while so the https action happens after the boot sequence is done? (unlike SmashHuevo, my user needs to be an Admin)

Role Deleted - Profile remains on User record

All -
We currently have a situation where users still have a profile assigned to them even after the role was removed and later deleted.
We had a number of custom roles deemed obsolete. Consequently, these roles were deleted. All users were removed from these roles before they were deleted. In looking back at the users, the profile for the now deleted role still exists on the user record. We run PFUD nightly but this has not resolved the issue that some users have non-generated and non-valid profiles on their user master record. Please advise if there is a way to resolve this inconsistency.
Thanks,
Marnie

I would remove them manually. How many users are there with old manual profiles?
Removing the profiles themselves for good you can do easily, but there is no standard program for a mass deletion.
If you are 100% certain that you can remove the profiles without any impact, then you can remove the check on the assignment.
Deleting them in Su02 will make this check though.
Cheers,
Julius

At what point is a user record created in the WWSEC_PERSON$ table?

Hello -
We are using OID for our SSO into the Oracle Portal. When we sync AD -> OID, when I query the Portal WWSEC_PERSON$ table and the new users are not present. I have to go into the Portal Administration page, query one of the users and set a default group. After this action they will have a record in the WWSEC_PERSON$ table.
The reason Im asking is we are trying to automate the default group assignment using the wwsec_api.set_defaultgroup api, but because these users are missing from the WWSEC_PERSON$ table, they obviously cannot be assigned a group.
Is there a way to force new users into the portal DB table? Has anyone else automated this type of assignment?
Thanks
Brian

I've found that ODS.DS_ATTRSTORE comes in very handy to query OID data using SQL. There are multiple attribute records for each entry. The attribute 'uid' contains the user name and 'createtimestamp' contains the timestamp for when the user was created in OID after being synched from AD. The attribute 'orcldefaultprofilegroup' stores the default portal group for the user too.

Display logged in user record from MySql DB

I am currently building my business website. I have already set up my MySQL database, added a table for clients with ID, Username, Password, SessionID, and File. I have connected the db in dreamweaver. I have built the log in page for users to log in. After they log in, I want them to be able to see their record data on the next page. Logging in works just fine, but when the next page comes up, it is blank, as if there is no record data. I do no know much about PHP so I am sure it has something to do with the way I have it set up. The only server behaviors I have added is to log in user. I chose not to add any other validation behaviors until I get this problem fixed. Anyone who could steer me in the right direction?

> but if I do not use them, then someones going to have
>to show me a basic code to get me started
My suggestion would not be to just learn basic code just to get started. You'll end up creating a site that was build-as-you-learn, which are always a mess. A better approach, if you really want to be a developer, is to take time to learn the concepts first. If you really don't want to learn this stuff and just want your site built, then hire an expert. If this is your business then focus on your business and let an experienced developer build the site.
And if you just need to fix this one problem, then do as osgood suggested - post the code and someone here can help sort it out. But I suspect this is the first of many roadblocks you will hit and you may end up spending more in your own lost time than it would take to bid this out. Hard to say without knowing more about the features you plan to implement.

Finding the master user records , how to find the active users

Hi friends,
i want master user information, which table consists master user information and also which table consists active users ,
like address ADRC is the master table like that for users which is the master table .
can any one help me urgently.

Hi,
check the below tables
USR01                          User master record (runtime data)
USR02                          Logon Data (Kernel-Side Use)
USR03                          User address data
USR04                          User master authorizations
USR05                          User Master Parameter ID
USR06                          Additional Data per User
Edited by: Velangini Showry Maria Kumar Bandanadham on Apr 24, 2008 3:31 PM

Audit Vault & Apex - ANONYMOUS user recorded rather than Apex end user

Hi,
We have Audit Vault 10.2.3 & Apex 3.2
Audit Vault stores the name of the database user when a table is updated through SQL*Plus etc as expected.
Problem is through Apex and insert to db table using simple form on table the user ANONYMOUS is recorded.
We need to have the actual end user logged into Application Express.
Is there anyway of configuring Audit Vault or Apex to use/pass v('APP_USER')? Does something need to be done in Apex to set a session?
Running the below shows 2 ANONYMOUS users and no APEX_PUBLIC_USER or Apex end user.
select username, count(*)
from v$session
group by username;
Any advice & guidance would be great - thanks in advance.

Having posted the same question on the Apex forum I received the following response and have been able to use CLIENT_ID to return the apex user and session details. Thought it best to post here too incase others search for the same information.
Since Audit Vault relies on native database auditing it can only collect information that is recorded by the "source" database in its audit trail. APEX populates the CLIENT_INFO field of the connection with the APP_USER. However, CLIENT_INFO is not recorded in the audit trail. Instead the CLIENT_ID is captured. APEX records a composite value in this field. The value is formatted as "APP_USER:SESSION_ID". This value should be recorded in the audit trail and consequently sent to Audit Vault. Audit Vault's reports should be able to display this field, and you can filter on it to get the information you need.

User records auto provisioning problem!

My problem is:
I configured a access policy and a group. Upon user created the record is to be provision to OID and the record state is pre-provision.
I can let it go through by manually clicking. How can I let it do this automatically without human operation?
Thanks!

What do you mean by pre-provision ?
I think it is stuck in System Validation
Have you checked Auto Save on Process Defn of this resource. If no then check that and try provisioning again.

CUA - how can I disable child system user record RENAME?

I have setup CUA. How can I disable SU01/RENAME from the child system? If a user is Renamed directly in the child system, the new record is unlocked and can be edited in the child system. These new records are now out of sync with CUA master data.
I dont see an option for 'rename' in SCUM.
Is this how CUA is supposed to work, or can the rename function be disabled?
Thanks.

Ben,
We have installed CUA on solution manager 4.0, the back end (child) system is R3 4.7.
My CUA SCUM shows seperate tabs for Address and Logon data.
On the Address tab Ive set everything to global, its a long list.
On the Logon tab all fields, except for inital password, are set to 'global', inital password is set to 'everywhere', to allow changes directly in the child system.
Just about everything seems to be working, except this RENAME problem. The users are greyed out in the child system, the create button doesnt even exist anymore in SU01 in the child system. Syncing between the CUA and Child systems is working as I expect.
Any suggestions?
Thanks for the quick response.

User Records

Similar Messages

Maybe you are looking for